Medium
CVE-2026-32230
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
Medium
ghsa-vffh-c9pq-4crh
Uptime Kuma Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read
Medium
CVE-2025-26042
Uptime Kuma's Regular Expression in pushdeeer and whapi file Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2024-56331
uptime-kuma vulnerable to Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2023-36822
Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss
Low
ghsa-23q2-5gf8-gjpp
Enabling Authentication does not close all logged in socket connections immediately
Medium
CVE-2023-49804
Password Change Vulnerability
Medium
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
High
CVE-2023-44400
Uptime Kuma has Persistentent User Sessions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.